?_ScreenToClient@@YGPAXPAKPAEPAI@Z
Static task
static1
Behavioral task
behavioral1
Sample
f60e2b71715b00abc13976c67a3e2a01_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f60e2b71715b00abc13976c67a3e2a01_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f60e2b71715b00abc13976c67a3e2a01_JaffaCakes118
-
Size
86KB
-
MD5
f60e2b71715b00abc13976c67a3e2a01
-
SHA1
91e16582e9868ebbef6317e99d11b1494c2b51a7
-
SHA256
231d4c1be9d7949c5821e70881c7ed833167378fbbd7f8a70f5d8904d05d8195
-
SHA512
83cf07ca31f4f21a120f0ba48caaaf98c95b294fe9af08552e8c4fc2604936746d246f80c02b6832b036a92e3fe744d1ab2e1f49ae0a5ea88cbd240df0bf83d0
-
SSDEEP
1536:Y/pRrgaErlEHSYq9+8U6i1ESV/cdoRGs0k6ufRK4NvxjFb9vKdOlGv6ErMMkjmu/:6VErESYqQf6i6WcTvkDKapPO0GCEgMkY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f60e2b71715b00abc13976c67a3e2a01_JaffaCakes118
Files
-
f60e2b71715b00abc13976c67a3e2a01_JaffaCakes118.exe windows:5 windows x86 arch:x86
0783bbe6df382a7b790c5f38d1de7eb7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrCmpNIW
PathCompactPathW
StrToIntExW
StrRStrIW
StrCpyNW
ord158
PathFindNextComponentW
ChrCmpIW
kernel32
LoadLibraryExW
GetTapeParameters
GetModuleFileNameA
FileTimeToDosDateTime
SetupComm
GetCommModemStatus
MoveFileExA
GlobalCompact
SetMessageWaitingIndicator
SetTapePosition
LoadLibraryA
CreateSemaphoreW
lstrcmpW
GetMailslotInfo
GetModuleHandleW
SetWaitableTimer
SetInformationJobObject
user32
GetMouseMovePointsEx
UnregisterClassW
LoadImageW
ScreenToClient
GetSystemMenu
CloseClipboard
GetWindowTextLengthW
WaitForInputIdle
EnumDesktopsW
SetPropW
SetWinEventHook
GetMenuStringA
FrameRect
GetMenuContextHelpId
PostMessageA
SystemParametersInfoA
GetDlgCtrlID
SetWindowTextW
ValidateRect
CheckMenuItem
LoadCursorFromFileW
MapWindowPoints
gdi32
PlayEnhMetaFile
GetEnhMetaFileW
SelectClipPath
GetRandomRgn
GetFontData
PolylineTo
CreateFontIndirectA
GetDeviceCaps
CreateEnhMetaFileA
CreatePolyPolygonRgn
GetTextExtentExPointW
SelectPalette
advapi32
AreAllAccessesGranted
Exports
Exports
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.icode Size: 1024B - Virtual size: 643B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.m_data Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c_data Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.n_data Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 890B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ